PRIVACY POLICY
Dear user,
Pursuant to art. 13 EU Regulation 2016/679 (hereinafter “GDPR”), we inform you that processing of the data provided by you will be carried out using methods and procedures aimed at guaranteeing that the processing of Personal Data will be carried out respecting the fundamental rights and freedom and dignity of the data subject, with special concern for confidentiality and security, personal identity and right to protection of personal data.
We remind you that processing means any operation or set of operations, carried out with or without the use of automatic processes and applied to personal data or to the sets of personal data, such as collecting, recording, organising, structuring, retaining, adapting or modifying, extracting, using, communicating by transmission, dissemination or any other way of making them available, comparing or interconnecting, limiting, erasure or destruction (art. 4 GDPR).
1 – Subject of the processing of personal data.
The data are directly processed by the school L’italiano a portata di mano and refer to:
- personal datas (such as, for example: name, surname, place and date of birth);
- contact data;
- data which refers to the country of origin.
2 – Data controller and personal data protection officer.
The data controller is the school L’italiano a portata di mano – Via Pellegrino Rossi, 12, 20161 Milano, in person of Maria Pagano
The data controller can be contacted via e-mail at ciao@italianoaportatadimano.it
3 – Purpose of the processing
Personal data and possible changes you may communicate in the future to the school L’italiano a portata di mano are processed for the exclusive following purposes:
3.1 WITHOUT EXPRESS CONSENT, for purposes connected to the execution of the contract
- attendance of learning activities;
- release of the certificate of attendance;
- possible exams enrollment for the Certification at one of the schools recognized by the Università di Siena
3.2 WITH YOUR SPECIFIC EXPRESS CONSENT
- use of your images for data controller’s promotional brochures or images;
- publishing of your images or videos on the data controller’s web site;
- publishing of your images or videos on the data controller’s social media pages;
- information transmission via e-mail about our events and promotional initiatives.
4 – Legal grounds for processing
The legal grounds for the processing are to be found:
- in the execution of the obligations coming from the signed contract (according to the art. 6.1, lett. b) of the GDPR);
- in the legitimate interest of the Data Controller (ex art. 6.1, lett. f) of the GDPR);
- in your express and unmistakeable consent (ex 6.1, lett. a) of the GDPR).
5 – Terms of processing
The processing is limited to the following operations and methods:
- collecting the data from the data subject through on-line form;
- communication of your personal data to third persons duly authorized by the Data Controller.
The data will be processed by paper and digital archives (including laptop and notebook) and in strictly needed ways for the above mentioned purposes.
The data will not be disseminated, but they will or may be communicated to public or private parties acting within the context of the purposes described above.
6 – Data retention
The Data Controller will process your personal data for the requested time to achieve the purposes for which they are processed,as above described, and for the time the School is subject to data retention obligations for fiscal purposes or other purposes provided for by law or regulations. In any case, no more than 10 years since the data collection and no more than 2 years for marketing purposes.
- – Communication of the data
Your personal data may be communicated to:
- consultants or accountants who provide professional service to the School for the above mentioned purposes;
- communication agency who provides marketing services to the school L’italiano a portata di mano: KALISI srls Via Sardegna, 32 – 20146 Milano
8 – Consequences of refusal to personal data provision
Providing the data for the purposes under item 3.1 is obligatory. Lacking such data, it will not be possible to proceed with the taking in charge and the answer to your contract request.
On the contrary, data providing for the purposes as per item 3.2 is optional and their processing by the Data Controller will occur only with your specific express consent.
9 – Rights of the data subject
According to the provisions of the GDPR, the data subject has the following rights against the Data Controller:
- obtain confirmation that his data are being processed, and in such case, obtain access to the personal data (Right of access Art. 15);
- obtain rectification of inaccurate data concerning him without unjustified delay (Right to rectification Art. 16);
- obtain erasure of personal data without unjustified delay; the data Controller has the obligation to erase without unjustified delay the personal data, if certain conditions exist (“right to be forgotten”, art. 17);
- obtain limitation of processing in certain cases (right to limitation of processing, art. 18);
- receive in a structured format, of common use and readable from an automatic device, the personal data which concern him and has the right to obtain direct transmission to another data Controller, without hindrance from the data Controller to whom he has provided the data, in certain cases (Right to data portability art. 20);
- object at any time for reasons related to your special situation, to processing of personal data concerning you (Right to object, Art. 21);
- receive without undue delay communication of breach of personal data incurred by the Data Controller (Art. 34);
- recall at any time the expressed consent (Conditions for consent art. 7).
- Where applicable, you also have the rights under Articles 16-21 of GDPR (right to rectification, “right to be forgotten”, right to limitation, right to portability of the Data, right to object), as well as the right to lodge complaint to the Authority for the Protection of Personal Data.
12 – Update to this information notice
This Information notice may undergo changes. Any substantial change will be notified to the data subjects by notice or publication on the website.
05/08/2021